Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa
File: a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa (raw, json)
Hash identifier: CSNfqkpXihY5fTn5zGFv/rSeGDySZsrlSBxy0GgMY60=
Subject key identifier: 74:55:3D:CD:B0:5C:12:A3:96:05:A9:50:AD:E0:4C:DF:26:F9:31:43
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848256381CE288322BDC3D524A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa
Signing time: Mon 09 Dec 2024 05:32:17 +0000
ROA not before: Mon 09 Dec 2024 05:32:17 +0000
ROA not after: Sun 09 Mar 2025 05:32:17 +0000
asID: 13335
IP address blocks: 104.29.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:63:81:ce:28:83:22:bd:c3:d5:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:32:17 2024 GMT
Not After : Mar 9 05:32:17 2025 GMT
Subject: CN=94b1d59b-3a20-4253-aeb9-7b91930f5562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:fa:96:b6:57:fe:26:ea:4b:59:66:b3:46:
b0:ef:be:69:37:42:ad:32:77:07:ae:49:ec:11:bc:
33:5a:44:48:b6:8c:de:ae:3a:09:d3:69:d8:be:b5:
90:a9:6f:78:94:43:f1:f8:16:94:09:d6:c9:25:c7:
fe:66:81:08:7a:ac:a0:8e:35:5c:d5:2d:c3:19:0d:
fc:9c:72:f3:73:a5:07:7f:f9:a6:89:63:c5:d1:89:
1e:56:c8:59:80:c8:11:f2:2f:4f:cf:be:33:2c:2b:
3d:fb:ab:6d:f9:aa:09:f4:81:16:ed:b4:3e:82:d0:
20:6a:fe:4a:d0:9b:60:c5:ca:1d:7e:ef:6a:3a:7a:
ab:fd:a8:ad:8e:71:17:65:1d:45:d0:06:bc:7d:7d:
7b:23:2c:68:2e:71:fd:02:58:e3:42:b6:fa:0d:f4:
1e:4b:66:3a:78:78:bf:4d:af:c2:88:c6:47:3a:bf:
01:a7:4d:fb:9b:6a:0f:3a:3d:ba:3c:01:6d:3b:86:
ee:79:65:63:8d:64:a3:f0:95:ca:6f:d8:4e:f5:14:
8a:17:0d:f3:6b:7f:ff:eb:38:c6:55:60:a6:57:ba:
1b:79:bd:b9:2c:57:03:25:79:01:cb:d9:93:ce:2d:
e2:be:93:fd:18:0d:f2:1d:7b:74:c8:59:4a:e2:99:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:3D:CD:B0:5C:12:A3:96:05:A9:50:AD:E0:4C:DF:26:F9:31:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:1d:ff:a1:16:66:5f:92:16:74:78:7d:2b:c3:d6:03:e3:a3:
69:de:76:41:67:dd:e2:a8:9a:d2:0a:86:26:e3:c8:d0:8a:9e:
76:cc:d0:95:4d:db:7e:59:8e:42:3a:61:24:2c:01:37:86:0a:
22:be:ff:5d:2d:f0:3b:89:cb:2c:0c:1e:22:4b:d4:ec:35:d5:
0d:23:45:29:72:60:ef:a5:83:44:9c:21:14:b9:a1:d1:31:a0:
d7:16:0b:13:5e:c4:af:3f:a0:96:af:94:d1:01:92:b0:a6:46:
19:48:f9:c8:6d:26:0d:1c:db:e5:5d:a4:3a:f4:6e:71:97:ff:
fd:fd:34:7c:f4:6b:d6:57:e1:79:b7:1c:b1:84:58:6e:a6:94:
25:7b:d0:d7:15:20:bc:9e:b9:8f:25:fd:c1:cd:54:d1:f5:f9:
f1:8d:d4:37:08:fa:f6:cc:61:64:1e:84:af:ec:2f:d1:0c:d9:
a5:3f:a8:5a:6c:b2:2e:ad:9b:f3:1f:26:b9:81:68:78:a9:2b:
c6:c0:52:f2:f3:f1:d3:9b:9b:0d:66:4c:fc:6f:8d:97:61:1b:
47:81:22:79:51:75:77:98:5f:bb:a6:ed:49:d4:e2:f2:b9:a4:
ce:04:31:66:6b:b9:3c:c7:97:c4:5b:7a:ba:5e:5c:e6:6d:73:
08:b4:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:12 2025 by rpki-client